CVE-2020-4346

IBM API Connect's V2018.4.1.0 through 2018.4.1.10 management server has an unsecured api which can be exploited by an unauthenticated attacker to obtain…

Medium · published May 12, 2020

CVSS v3.0
5.3
EPSS
1%
Percentile
65.3
In the wild
Unconfirmed
What it is

IBM API Connect's V2018.4.1.0 through 2018.4.1.10 management server has an unsecured api which can be exploited by an unauthenticated attacker to obtain sensitive information. IBM X-Force ID: 178322.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/A:N/AV:N/I:N/S:U/UI:N/AC:L/C:L/PR:N/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.01098 · 65.3th percentile
Published
2020-05-12T13:40Z
EPSS history
Timeline
  • 12 MAY 13:40Z
    IBM API Connect's V2018.4.1.0 through 2018.4.1.10 management server has an unsecured api which can be exploited by an unauthenticated attacker to obtain…
    cvelistv5